Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oEstZq5G7zdtqmYeLeD2SsLc1ZY.roa
File: oEstZq5G7zdtqmYeLeD2SsLc1ZY.roa (raw, json)
Hash identifier: z601uDhYpFAuVWYFwJ24Ua7Qrxw6MGp5XQSR4Xv/w7A=
Subject key identifier: A0:4B:2D:66:AE:46:EF:37:6D:AA:66:1E:2D:E0:F6:4A:C2:DC:D5:96
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1F7B734DD1D9BCB9629713227564
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oEstZq5G7zdtqmYeLeD2SsLc1ZY.roa
Signing time: Thu 02 Jan 2025 07:48:53 +0000
ROA not before: Thu 02 Jan 2025 07:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.145.0/24 maxlen: 24
45.43.146.0/24 maxlen: 24
45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.156.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
45.43.162.0/24 maxlen: 24
64.137.16.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
216.173.94.0/24 maxlen: 24
216.173.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:1f:7b:73:4d:d1:d9:bc:b9:62:97:13:22:75:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a04b2d66ae46ef376daa661e2de0f64ac2dcd596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:2e:44:cb:28:a6:9e:a6:4d:c0:f2:8f:36:
a2:fb:f6:94:0c:05:25:e1:2d:a8:eb:f7:39:49:96:
b7:87:e0:be:38:c3:0a:70:d9:2b:59:23:7a:ad:ce:
48:47:17:24:65:5a:89:c2:86:cd:8e:6a:a9:9e:d1:
3d:0e:58:d7:24:6b:b0:4f:d6:92:41:f7:64:d6:89:
81:2c:67:6d:7c:1f:f7:ae:85:c1:1a:d6:6b:e0:78:
7c:9c:a7:88:f2:69:a6:f9:43:e3:21:2a:c4:5f:83:
17:76:49:59:70:b1:fc:d8:be:90:4b:ff:d5:50:22:
5a:01:be:e7:59:4a:7f:93:82:f9:da:69:fb:62:93:
dd:2c:35:b0:4e:a8:4e:d5:f7:70:29:ee:e7:71:4e:
9b:3e:a5:a1:a3:c5:6b:10:83:46:9a:15:05:a3:79:
4e:07:31:1a:60:24:b2:ca:7d:22:7b:93:5c:36:7f:
64:72:b6:41:36:93:be:89:f1:51:3d:62:46:5a:88:
c7:63:82:27:53:a6:36:ce:dd:53:18:4d:f9:39:21:
a7:04:a9:75:d3:ae:fc:04:32:1b:4b:dd:cd:93:5e:
3c:b2:95:3d:29:8e:d1:7f:85:c1:10:da:fc:5a:43:
bf:58:68:25:d1:cb:df:3a:58:ac:2b:1d:0e:af:8b:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:2D:66:AE:46:EF:37:6D:AA:66:1E:2D:E0:F6:4A:C2:DC:D5:96
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oEstZq5G7zdtqmYeLeD2SsLc1ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.145.0-45.43.146.255
45.43.148.0/22
45.43.154.0-45.43.156.255
45.43.158.0-45.43.162.255
64.137.16.0/24
104.222.176.0/21
104.222.189.0/24
104.233.8.0/23
104.233.59.0/24
104.238.6.0/24
104.238.11.0-104.238.13.255
104.239.8.0/24
104.239.12.0/24
104.239.14.0/24
104.239.29.0/24
104.239.54.0-104.239.65.255
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.90.0-216.173.95.255
Signature Algorithm: sha256WithRSAEncryption
95:48:2f:94:19:8a:59:43:84:d8:8e:ab:49:be:2c:e0:5a:c4:
9a:a1:72:0d:7a:20:74:e9:dc:d7:60:29:4f:cf:97:8c:05:80:
de:b6:7c:88:6b:b8:eb:32:78:d1:db:07:a6:be:42:e3:c7:d3:
29:7e:eb:93:c5:dc:cf:1e:ec:25:f4:f4:43:d3:c0:46:ce:77:
cc:4c:cd:db:60:8c:e6:22:d6:b3:6d:8b:c6:0e:69:5a:19:e9:
61:04:bd:6d:9f:5e:b5:37:d7:b6:38:a8:75:ba:84:6c:ef:b6:
dd:7a:27:c1:23:5d:05:c1:38:4d:78:79:d6:ad:d3:42:76:d6:
3e:bd:97:cd:7f:6f:50:0c:b9:30:21:76:a0:02:8d:6b:8b:6b:
16:b9:22:3a:4d:cb:d6:65:7d:b1:b8:ac:af:65:5a:5a:74:da:
56:5c:4e:e0:20:86:23:4c:3f:35:e0:78:78:b0:16:86:14:7d:
a5:48:0b:f4:06:df:dd:25:0d:f0:75:c4:ee:8c:7a:a4:49:99:
4a:39:9e:c8:e7:df:6b:f7:08:c7:5f:5d:44:19:e2:20:f2:b3:
04:5c:a1:9d:97:23:28:9c:a7:d6:13:70:e4:22:de:21:cf:a1:
2f:8e:b1:b4:65:ec:cd:f3:2b:6a:07:2e:32:88:78:b9:ba:b1:
b2:15:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:52 2025 by rpki-client